Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

I will start with the conclusion. The Brotli vulnerability disclosed on October 21 is not just a Node.js issue. Because the ...

To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...

Deploy Azure OpenAI with GPT-5-mini by using the Azure Developer CLI. Run a local app that authenticates with Microsoft Entra ID instead of an API key. Send one request to the Responses API and print ...

Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Web SQL, Angular 2, Facebook’s Flow, Google AMP, runtime CSS-in-JavaScript, micro front ends, and client-side-only SPAs were ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.